Covenant Care

Covenant Care was allegedly attacked by Hunters International which exposed patients’ protected health information (PHI) and employees’ personal information.

The compromised information includes names, dates of birth, dates of death, Social Security numbers, medical record numbers, health insurance information, clinical information, and treatment information.

CCC put extra administrative and technical protections to protect its PHI in response to this compromise.

Free credit monitoring and identity theft restoration services were extended to the affected consumers. In addition, OCR gave CCC technical support for its security management procedure and secured confirmation that CCC carried out the aforementioned corrective activities.

Source: https://www.databreaches.net/covenant-care-patient-and-employee-data-being-leaked-by-ransomware-group/

TPRM report: https://scoringcyber.rankiteo.com/company/covenant-care

"id": "cov453141223",
"linkid": "covenant-care",
"type": "Data Leak",
"date": "12/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Covenant Care',
                        'type': 'Healthcare'}],
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'PHI and personal information'},
 'description': 'Covenant Care was allegedly attacked by Hunters '
                'International, which exposed patients’ protected health '
                'information (PHI) and employees’ personal information.',
 'impact': {'data_compromised': ['names',
                                 'dates of birth',
                                 'dates of death',
                                 'Social Security numbers',
                                 'medical record numbers',
                                 'health insurance information',
                                 'clinical information',
                                 'treatment information'],
            'identity_theft_risk': 'High'},
 'post_incident_analysis': {'corrective_actions': 'Implemented extra '
                                                  'administrative and '
                                                  'technical protections'},
 'response': {'recovery_measures': 'Free credit monitoring and identity theft '
                                   'restoration services',
              'remediation_measures': 'Extra administrative and technical '
                                      'protections'},
 'threat_actor': 'Hunters International',
 'title': 'Covenant Care Data Breach',
 'type': 'Data Breach'}